Description
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| F5 | BIG-IQ | 8.0 – < 8.2.0.1 | 8.2.0.1 |
References
- https://my.f5.com/manage/s/article/K000141080 vendor-advisory